Code injection

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust actix-utils crate before 2.0.0, which stems from a Cell implementation that allows obtaining multiple mutable references to the same data...

CVE-2020-35899: Use After Free

An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

Debian DSA-4819-1 : kitty - security update

Stephane Chauveau discovered that the graphics protocol implementation in Kitty, a GPU-based terminal emulator, did not sanitise a filename when returning an error message, which could result in the execution of arbitrary shell commands when displaying a file with cat. C Tenable Network Security,...

RUSTSEC-2020-0155 `Read` on uninitialized buffer in `fill_buf()` and `read_up_to()`

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

CVE-2020-35711

An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...

PT-2020-17645

Name of the Vulnerable Software and Affected Versions multiqueue crate through 2020-12-25 Description An issue in the multiqueue crate allows unconditional implementations of Send for types used in queue implementations, such as InnerSend, InnerRecv, FutInnerSend, and FutInnerRecv. This can lead ...

Domain Spoofing

chromium is vulnerable to domain spoofing. Inappropriate implementation in networking allows a remote attacker to perform domain spoofing via a malicious HTML page...

Inappropriate Implementation

chromium, sid is having an inappropriate implementation due to a flaw found in the WebRTC component of the Chromium browser...

Inappropriate Implementation In Cookies

chromium, sid is having an Inappropriate implementation in cookies due to a flaw found in the cookies component of the Chromium browser...

Cryptographic Issues

chromium suffers from cryptographic issues. The vulnerability exists through inappropriate implementation in cryptohome...

Insecure Implementation

chromium uses an insecure implementation. An inappropriate implementation flaw was found in the V8 component of the Chromium browser...

Insecure Implementation

chromium uses an insecure implementation. An inappropriate implementation flaw was found in the filesystem component of the Chromium browser...

[SECURITY] Fedora 32 Update: matrix-synapse-1.24.0-1.fc32

Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...

Medium: qemu-kvm

Issue Overview: A use-after-free issue was found in the SLiRP networking implementation of the QEMU emulator. The issue occurs in ipreass routine while reassembling incoming packets, if the first fragment is bigger than the m-mdat buffer. A user or process could use this flaw to crash the QEMU...

DEBIAN-CVE-2020-29485

An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XSRESETWATCHES request, not all tracking information is freed. A guest can cause unbounded memory usage in oxenstored. This can lead to a system-wide DoS. Only systems using the Ocaml Xenstored implementation are...

(0Day) D-Link DCS-960L HNAP LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-960L Wi-Fi cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from...

Nut/OS Denial of Service and Remote Code Execution Vulnerability (CNVD-2021-19759)

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from a failure to check the DNS response data length. An attacker cou...

Nut/OS Denial of Service and Remote Code Execution Vulnerability (CNVD-2021-19760)

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from not checking the number of DNS queries/responses against availab...

Fedora: Security Advisory for libpri (FEDORA-2020-2f1ef40a96)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...